CVE-2026-94603criticalCWE-693

CVE-2026-94603: critical vulnerability in podman-container-tools podman

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Published

Follow this CVE+ Monitor podman+ Monitor podman

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 0.5%
Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
podman-container-tools · podman
Related CVEs — podman-container-tools podman

In the same product, most dangerous first.

CVE-2026-57231HIGHPodman: Malformed Image can trick podman run into leaking host environment variables into the containerEPSS 0.4%CVE-2026-55686MEDIUMPodman: WORKDIR symlink traversal vulnerabilityEPSS 0.4%